Argus — сканер уязвимостей веб-приложений и LLM

★ 8.1 · general

Argus is a Claude Code skill that provides six automated scanners targeting high-value web and LLM vulnerability classes. It covers CORS misconfiguration (origin reflection, null origin, credentialed read), CRLF and host-header injection, NoSQL auth-bypass via operators and $where blind time-based payloads, JWT attacks (alg:none, RS256→HS256 confusion, HS256 secret cracking), out-of-band confirmation of blind SSRF/XXE/SQLi/RCE/Log4Shell via interactsh, and an LLM red-team corpus spanning prompt-injection, jailbreak, system-prompt leak, data exfil, and indirect injection. All scanners are pure Python with no additional dependencies, and core logic runs offline. Use Argus when a target exposes a JSON API, JWT auth, a login endpoint, a parameter suspected of blind behavior, or any chatbot or agent feature.